158 reputation
8
bio website
location
age
visits member for 3 years, 2 months
seen Mar 5 at 22:45

Software Engineer who loves security!


Feb
27
awarded  Tumbleweed
Feb
20
awarded  Editor
Feb
20
revised Additional security for services hosted on a 2FA or Multi-Factor Authenticated Network
Corrected title spelling mistake
Feb
20
asked Additional security for services hosted on a 2FA or Multi-Factor Authenticated Network
Feb
20
comment Is anybody using client browser certificates?
Some are turning to software 2-factor auth, like Google's password reset sends a OTP to your phone when you attempt to log in from a computer that it doesn't recognize, and others are exploring the possibility to use a smartphone instead of a hardware token (to reduce costs).
Sep
24
awarded  Autobiographer
Apr
25
awarded  Popular Question
Feb
18
awarded  Supporter
Feb
17
awarded  Teacher
Feb
17
answered Lost Smart Card - extract private key?
Feb
17
accepted Does a CA need to have the same type of key as the certificates it is signing? RSA / Elliptic Curve (EC/ECDH/ECDSA)
May
17
awarded  Scholar
May
17
accepted Does secure remote password verifier transmission need to happen out of band?
Apr
27
comment Does a CA need to have the same type of key as the certificates it is signing? RSA / Elliptic Curve (EC/ECDH/ECDSA)
I am making an SSL server, but ultimately want to migrate to using EC cryptography instead of just RSA. (ECC is a server requirement, but RSA is acceptable in the interim.) I wanted to make a CA that would be able to handle both RSA and EC client certificate requests, but didn't know if there were any restrictions on what CA's are capable of signing, or what is the most efficient way to set it up.
Apr
26
asked Does a CA need to have the same type of key as the certificates it is signing? RSA / Elliptic Curve (EC/ECDH/ECDSA)
Jan
26
awarded  Student
Jan
26
asked Does secure remote password verifier transmission need to happen out of band?